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Top Stories 

• Officials released August 27 that California residents cut their water usage by 31 percent in 
July, surpassing government-mandated targets for the second month in a row. - 
Sacramento Bee (See item 15 ) 

• Thousands of firefighters and U.S. military personnel worked August 27 to contain over 60 
wildfires that have burned nearly 1.7 million acres across western States. - Reuters (See 
item 21) 

• A California woman pleaded guilty August 27 for her role in an immigration fraud scheme 
that provided student visas to foreign nationals netting as much as $6 million from citizens 
of South Korea, China, and other nations. - Beverly Hills Patch (See item 22 ) 

• An August 27 fire destroyed a Linn County Sheriff’s Office substation in Oregon, causing 
an estimated $900,000 in damage. - Portland Oregonian (See item 27 ) 
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Energy Sector 



1. August 27, Associated Press - (West Virginia) West Virginia regulators cite 2 
companies in separate fatal mine accidents. The West Virginia Office of Miner’s 
Health, Safety and Training issued 8 citations to Murray Energy and 2 citations to 
Rogers Petroleum Services Inc., following 2 separate fatal mine accidents in March. 
Rogers Petroleum was cited with failing to safely maintain truck brakes after an 
employee was killed after his truck overturned, and Murray Energy was cited for not 
properly controlling the mine roof, face, and walls after 1 worker was killed and 3 
others injured in a roof and rib fall. 

Source: 

http://www.tribtown.com/view/story/07271637cl29411999bd99838f4fe9f8/WV— 

Mine-Fatalities-Citations 

2. August 27, U.S. Securities and Exchange Commission - (California) SEC halts 
California-based oil and gas investment fraud. The U.S. Securities and Exchange 
Commission announced August 27 fraud charges and emergency asset halts of 
California-based Quantum Energy LLC and Quaneco LLC in response to alleged oil 
and gas investment schemes which raised $12.3 million from over 300 investors 
nationwide in connection with 5 unregistered offers. The companies diverted investor 
funds and operated phony “turnkey drilling” contract to cover undisclosed overhead 
expenses and personal compensation. 

Source: https://www.sec.gov/litigation/litreleases/2015/lr23329.htm 
For another story, see item 29 

Chemical Industry Sector 

See item 29 

Nuclear Reactors, Materials, and Waste Sector 

3. August 27, New London Day - (Connecticut) NRC reaches settlement with Dominion 
over apparent violations at Millstone. The Nuclear Regulatory Commission (NRC) 
announced August 27 that Dominion Resources will implement a broad range of 
corrective actions as part of a settlement reached following an April inspection that 
found alleged violations at the Unit 2 reactor at the Millstone Nuclear Power Plant in 
Waterford, which also includes reports that the plant did not receive licensing approval 
to change its Updates Final Safety Analysis Report. The NRC will follow up with the 
company to ensure proper corrective actions were taken. 

Source: http://www.thedav.com/article/20150827/NWS01/150829363 

For another story, see item 29 

Critical Manufacturing Sector 

See item 29 
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Defense Industrial Base Sector 



Nothing to report 

Financial Services Sector 

4. August 27, U.S. Department of the Treasury - (International) Settlement agreement 
between the U.S. Department of the Treasury’s Office of Foreign Assets Control 
and UBS AG. The Office of Foreign Assets Control announced a $1.7 million 
settlement with UBS AG August 27 to resolve allegations that the bank violated Global 
Terrorism Sanctions regulations through 222 transactions related to securities held in 
custody in the U.S. for a client believed to have committed, threatened to commit, or 
supported terrorism. 

Source: http://www.treasury.gov/resource-center/sanctions/OFAC- 
Enforcement/Pages/20 150827 33.aspx 

5. August 27, U.S. Department of Justice - (National) Business email compromise. The 
FBI’s Internet Crime Complaint Center (IC3) released an advisory warning 
corporations of Business Email Compromise (BEC) scams carried out through social 
engineering or various computer intrusion techniques to conduct unauthorized wire 
transfers, and cited a 270 percent increase in victims and exposed losses since January. 
BEC scams accounted for over $747 million in losses to 7,066 victims in all 50 States 
from October 2013 - August 2015. 

Source: http://www.ic3.gOv/media/2015/150827-l.aspx#fn2 

6. August 27, WCBS 2 New York City; Associated Press - (New York) $1.8 million 
burglary of armored car company on Uong Island foiled by alert officer. Nassau 
County authorities were searching for 4 accomplices in an attempted August 16 
robbery of $1.8 million from the Loomis Armored Inc., warehouse in Hicksville, after 
an officer arrested another suspect and found cash in his vehicle’s trunk on the night of 
the incident. The perpetrators reportedly used a sledgehammer and hydraulic jack to 
access a vault containing $20 million. 

Source: http://newvork.cbslocal.com/2015/08/27/long-island-armored-car-company- 
robbery/ 

For another story, see item 34 

Transportation Systems Sector 

7. August 28, KCNC 4 Denver - (Colorado) Driver who struck officer, leaving him 
with broken bones, suspected of DUI. Interstate 25 in Denver was shut down for 2 
hours August 28 while crews investigated the cause of a chain-reaction crash that 
involved 4- vehicles and injured a Denver officer. 

Source: http://denver.cbslocal.com/2015/Q8/28/crash-shuts-down-i-25-denver-police- 
officer-injured/ 

8. August 28, WWJ 950 AM Detroit- (Michigan) 7 mile stretch of 1-75 shuts down after 
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motorcycle trooper struck, dragged by another vehicle. A 7-mile stretch of 
Interstate 75 in Springfield Township was closed for several hours August 28 while 
crews investigated the cause of an accident involving a Michigan State Police trooper. 
Source: http://detroit.cbslocal.com/2015/08/28/i-75-shuts-down-due-to-accident- 
involving-police-motorcycle/ 

9. August 27, Huntsville Times - (Alabama) 1 dead in Shelby County plane crash. A 
Federal Aviation Administration official reported August 27 that a small plane headed 
to Shelby County Airport from Birmingham-Shuttlesworth International Airport 
crashed in a field and killed 1 person. The cause of the crash was under investigation. 
Source: 

http://www.al.com/news/birmingham/index.ssf/2015/08/plane crash reported in shelb 
y.html 



Food and Agriculture Sector 

10. August 27, U.S. Food and Drug Administration - (National) Bimbo Bakeries 
voluntary regional recall of certain limited breads produced under the Sara Lee, 
Great Value, Kroger, Bimbo, Nature’s Harvest and L’Oven Fresh Brands. 

Horsham, Pennsylvania- based Bimbo Bakeries issued a voluntary regional recall 
August 26 of certain bread products branded as either Sara Lee, Kroger, Bimbo, 
Nature’s Harvest, Great Value, or L’Oven Fresh after three consumer reports of 
fragments of glass on the product caused by a broken light bulb at one of the 
company’s bakeries. The products were shipped to retail stores nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm460059.htm 

11. August 27, U.S. Food and Drug Administration - (National) The One Minute Miracle 
Inc. issues voluntary nationwide recall of Miracle Diet 30 due to presence of 
undeclared phenolphthalein & Miracle Rock 48 due to presence of undeclared 
thiosildenafil. The U.S. Food and Drug Administration reported August 27 that 
Florida-based One Minute Miracle Inc., issued a recall of one lot each of its Miracle 
Diet 30 capsules due to undeclared phenolphthalein which may cause serious long-term 
health issues, and Miracle Rock 48 capsules due to undeclared thiosildenafil which 
could cause low blood pressure. The products were distributed via the Internet 
nationwide, and the recall also includes several of the company’s Miracle-branded 
products. 

Source: http ://ww w .fda. go v/S afety/Recalls/ucm460094.htm 

12. August 27, U.S. Department of Agriculture - (California) California Qi Li’s Braised 
Chicken recalls duck products due to misbranding and undeclared allergens. 
Fremont, California-based Qi Li’s Braised Chicken recalled approximately 6,644 
pounds of duck head and duck neck products August 26 due to misbranding and 
undeclared soy sauce. The products were produced from February 11 - August 13 and 
shipped to retail locations in California. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/201 5/recall- 114-2015-release 
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Water and Wastewater Systems Sector 

13. August 2, CBS News; Associated Press - (Hawaii) Million gallons of wastewater 
closes another beach in Hawaii. A million gallons of treated but not yet disinfected 
wastewater was discharged from the East Honolulu Wastewater Treatment plant, 
closing Sandy Beach and its vicinity August 27. A Hawaiian American water 
spokesperson reported that the incident happened August 25 after an underground 
electrical cable that feeds power to their chlorination system shorted out as heavy rains 
fell in the area. 

Source: http://www.cbsnews.com/news/million-gallons-of-wastewater-closes-another- 
beach-in-hawaii/ 



14. August 27, New Orleans Times-Picayune - (Louisiana) Gretna issues boil water 
advisory for E.coli bacteria. Gretna issued a boil advisory August 27 for residents and 
businesses after E.coli bacteria was detected during testing. Officials planned to flush 
the water system and retest samples. 

Source: 

http://www.nola.com/politics/index.ssf/2015/08/gretna issues boil water advis.html#i 
ncart most shared-west-bank 



15. August 27, Sacramento Bee - (California) California residents cut water use 31 
percent in July. The California State Water Resources Control Board released August 
27 that California residents cut their water usage by 31 percent in July, surpassing 
government-mandated targets for the second month in a row. 

Source: http://www.msn.com/en-us/news/us/california-residents-cut-water-use-31- 
percent-in-july/ar-BBmaXAm 

For another story, see item 29 

Healthcare and Public Health Sector 

16. August 28, Hartford Courant - (Connecticut) Electrical malfunction leads to smoke, 
evacuation at St. Francis Hospital. Thirty patients within the emergency department 
at St. Francis Hospital in Harford, Connecticut, were transferred to other parts of the 
hospital following an electrical malfunction that caused smoke to move through the 
ventilation system August 27. Power was temporarily affected and incoming 
emergency room patients were sent to other area hospitals. 

Source: http://www.courant.com/breaking-news/hc-hartford-saint-francis-hospital-fire- 
0828-2-20150827-story.html 

17. August 27, Columbus Dispatch - (Ohio) Break-in at Short North doctor’s office 
exposed patients’ records. Endocrinology Associates in Short North in Columbus 
notified about 1,400 patients in early August that their personal health information may 
have been accessed after staff discovered that padlocks were removed from a rented 
portable storage facility June 15 and June 19. Officials with the practice do not believe 
any patient information was misused and stated that security practices were increased. 
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Source: http://www.dispatch.com/content/stories/local/2015/Q8/27/Break-in-at- 
doctorxs-office-exposes-patient-records.html 

For another story, see item 29 

Government Facilities Sector 

18. August 28, WCAX 3 Burlington - (Vermont) Norovirus sickened Branbury State 
Park visitors. Health officials in Vermont reported August 28 that 120 visitors to 
Branbury State Park in Salisbury were sickened with norovirus the week of August 17. 
The park temporarily closed its swimming area, and health officials determined that 
transmission of the virus likely originated from other humans. 

Source: http://www.wcax.com/story/29893103/officials-norovirus-sickened-branburv- 
state-park-visitors 

19. August 28, Bryan-College Station Eagle - (Texas) Routine check finds gas leak at 
Texas A&M; campus partially evacuated. Two residence halls and 3 other campus 
buildings at Texas A&M University were evacuated for 3 hours August 27 due to a gas 
leak at the university’s Central Utility Plant. Utility crews reported to the scene and 
repaired the leak. 

Source: http://www.theeagle.eom/news/a m/routine-check- finds-gas-leak-at-texas-a-m- 
campus/article 49baae8a-4cdf-l Ie5-9d53-ab5d6el4b92c.html 

20. August 28, Omaha World-Herald - (Iowa) Ex-Casey city clerk admits to misusing 
funds; fire investigation continues. A report released August 27 by the Iowa Attorney 
General’s Office determined that the former Casey city clerk issued unauthorized 
checks to herself and misused city credit cards for personal purchases totaling 
$298,230. The former city clerk admitted to taking the funds following an August 2014 
fire that destroyed the combination city hall and community center. 

Source: http://www.omaha.com/news/iowa/ex-casev-city-clerk-admits-to-misusing- 
funds-fire-investigation/article 94fe3561-88cl-5f34-84d7-a7fef84457db.html 

21. August 27, Reuters - (National) Senate hearing on wildfires urged to help bolster 
firefighting capabilities. Thousands of firefighters and U.S. military personnel worked 
August 27 to contain over 60 wildfires that have burned nearly 1.7 million acres across 
western States. 

Source: http://www.reuters.com/article/2015/Q8/28/us-usa-wildfires- 
idUSKCN0QV29Y20 150828 

22. August 27, Beverly Hills Patch - (California) Beverly Hills man charged in $6 
million ‘pay to stay’ immigration fraud. A Los Angeles woman pleaded guilty 
August 27 for her role in an immigration fraud scheme that provided student visas to 
foreign nationals, who never went to class, netting as much as $6 million from citizens 
of South Korea, China, and other nations. The woman worked with a Beverly Hills man 
who owns Koreatown schools Prodee University, Walter Jay M.D. Institute, and the 
American College of Forensic Studies, among others. 

Source: http://patch.com/califomia/beverlyhills/beverlv-hills-man-charged-6-million- 
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pay- s tay-immi gration-fraud 



23. August 27, Reuters - (Mississippi) Student threatens to kill self, others at Miss. 
State University. Police arrested a Mississippi State University student August 27 in 
connection to allegations that the student was threatening to kill himself and others on 
campus. The university issued alerts about an active shooter and locked down the 
campus during the investigation. 

Source: http://www.msn.com/en-us/news/us/student-threatened-to-kill-self-others-at- 
miss-state-university/ar-BBm9NJJ 

24. August 27, WKRG 5 Mobile - (Florida) School bus flipped in collision with dump 
truck in Pensacola. Sixteen Pensacola High School students were transported to a 
local hospital after their school bus flipped over August 27 during an accident with 
another vehicle at an intersection in Pensacola. 

Source: http://wkrg.com/2015/08/27/school-bus-flips-over-in-pensacola/ 



Emergency Services Sector 

25. August 28, WWJ 62 Detroit - (Michigan) 4 teens escape Detroit detention center as 
ministers exit building. Authorities are searching for four teenager who escaped 
August 27 from the Don Bosco DePaul Center in Detroit by rushing through an open 
door on foot. 

Source: http://detroit.cbslocal.com/2015/08/28/4-teens-escape-detroit-detention-center- 
as-ministers-exit-building/ 

26. August 27, KPIX 5 San Francisco; San Francisco Bay City News - (California) 

Inmates riot at maximum security prison in Soledad. Two inmates were transported 
to a local hospital and several others were injured during a riot involving 90 inmates at 
the Salinas Valley State Prison in Monterey County August 27. Prison guards used 
pepper spray and less-than-lethal weapons to break up the riot that began between 
several inmates in the yard. 

Source: http://sanfrancisco.cbslocal.com/2015/08/27/inmates-riot-at-maximum- 
security-prison-in-soledad/ 

27. August 27, Portland Oregonian - (Oregon) Fire destroys Linn County Sheriff’s 
Office substation in Mill City. An August 27 fire destroyed a Linn County Sheriff’s 
Office substation in Mill City, causing an estimated $900,000 in damage after the fire 
reportedly started when a city public works employee parked small equipment in the 
building. Employees evacuated the building after failing to extinguish the fire. 

Source: http://www.oregonlive.com/pacific-northwest- 
news/index.ssf/2015/08/fire completely destroys linn.html 

28. August 27, WKYT 27 Lexington - (Kentucky) Neighbors want security changes after 
inmate escapes from Blackburn Correctional Complex. Officials with the Kentucky 
Department of Corrections announced that an inmate at Blackburn Correctional 
Complex walked away from the facility August 26, making him the second inmate to 
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escape from the complex during the week of August 24. 

Source: http://www.wkvt.com/home/headlines/Neighbors-want-security-changes-after- 
second-inmate-escapes-from-prison-32304022 1 .html 

For another story, see item 16 

Information Technology Sector 

29. August 28, Securityweek - (International) Moxa patches flaws in industrial ethernet 
switches. Security researchers from Applied Risk discovered serious privilege 
escalation, denial-of-service (DoS), and cross-site scripting (XSS) vulnerabilities 
affecting Moxa industrial ethernet switches that could allow an unauthenticated remote 
attacker to compromise the device and connected industrial assets. Moxa recently 
released an update addressing nine heap-based buffer overflow and classic buffer 
overflow vulnerabilities in its SoftCMS closed-circuit television (CCTV) central 
management software. 

Source: http://www.securitvweek.com/moxa-patches-flaws-industrial-ethernet-switches 

30. August 28, Securityweek - (International) Mozilla updates Firefox 40 to patch two 
serious flaws. Mozilla released Firefox version 40.0.3 addressing a use-after free 
vulnerability in which an attacker could crash Firefox or execute arbitrary code with 
user privileges, and an add-on notification bypass through data Uniform Resource 
Locator (URL) that an attacker could use to trick users into installing a malicious add- 
on. 

Source: http://www.securitvweek.com/mozilla-updates-firefox-40-patch-two-serious- 
flaws 



31. August 28, Securityweek - (International) Adobe releases hotfix to patch ColdFusion 
vulnerability. Adobe released a hotfix addressing a vulnerability in ColdFusion in 
which a security hole could be exploited to compromise data security, affecting 
LiveCycle Data Services and BlazeDS. 

Source: http://www.securityweek.com/adobe-releases-hotfix-patch-coldfusion- 
vulnerability 



32. August 28, Softpedia - (International) Phishing costs an average company up to $3.7 
million per year. A Wombat Security Technologies report carried out on 377 U.S. 
organizations revealed that an average-sized organization can lose up to $3.77 million 
per year in extrapolated costs due to phishing attacks, that 48% of the costs come from 
productivity losses in mitigating the attacks, and that uncontained malware attacks can 
cause industry losses up to $105 million, among other findings. 

Source: http://news.softpedia.com/news/phishing-costs-an-average-company-up-3-7- 
million-per- year-4903 lO.shtml 

33. August 27, Threatpost - (International) BitTorrent patch throttles reflective DDoS 
attacks. BitTorrent released a patch addressing a libuTP protocol vulnerability that 
could allow attackers to carry out User Datagram Protocol (UDP) distributed reflection 
denial-of-service (DRDoS) attacks. 
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Source: https://threatpost.com/bittorrent-patch-throttles-refIective-ddos-attacks/114446 



34. August 27, SC Magazine - (International) DD4BC are DDoS attack driving force, 
new report claims. VeriSign released findings from its “Distributed Denial of Service 
(DDoS) Trends Report - 2 nd Quarter 2015” revealing a period of increased activity 
from the DDoS for Bitcoin (DD4BC) threat group, and that 22 percent of the attacks 
analyzed targeted the financial and payment sector. Attacks by the group typically start 
with threats and demands for ransom, followed by increased demands and ramped up 
DDoS attacks. 

Source: http://www.scmagazineuk.com/dd4bc-are-ddos-attack-driving-force-new- 
report-claims/article/435234/ 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

Nothing to report 

Commercial Facilities Sector 

35. August 27, WPXI 11 Pittsburgh - (Pennsylvania) Grease fire forces 26 people from 
Ross Township apartment building. Twenty-six residents from the Perry Arms 
apartment complex in Ross Township were displaced due to an August 26 grease fire 
that left smoke damage throughout the building. 

Source: http://www.wpxi.com/news/news/local/14-families-forced-their-homes-after- 
apartment-fir/nnRw4/ 

Dams Sector 



See item 29 
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NTAS 



NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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